it seems that we shipped vanilla 0.5 with a minor bug. vanilla-user-login and vanilla-user-register seem to have form tags with both method=get and method=post attributes. another point for 0.5.1 [the bugfix release ;)].